JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.20.224

65.111.20.224 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.20.224

Whois 65.111.20.224

IP Abuse Reports for 65.111.20.224:

This IP address has been reported a total of 11 times from 8 distinct sources. 65.111.20.224 was first reported on June 27th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-04-21 01:37:09 (1 month ago)	[TueApr2103:37:04.7041982026][security2:error][pid2446757:tid2446778][client65.111.20.224:0]ModSecur ... show more [TueApr2103:37:04.7041982026][security2:error][pid2446757:tid2446778][client65.111.20.224:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"bestrestmaterassi.ch\"][uri\"/dump.sql\"][unique_id\"aebUwCM_zKWpNOzXIlv8KAAAAFI\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 Burayot	2026-03-06 08:59:57 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 65.111.20.224 (BR/Brazil/-): 2 in th ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 65.111.20.224 (BR/Brazil/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:12:33 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.20.224 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 65.111.20.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:12:21.662659 2025] [security2:error] [pid 27727:tid 27746] [client 65.111.20.224:21779] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|unitedonegroup.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "unitedonegroup.com"] [uri "/on.db"] [unique_id "aSUelfeXMnwYTnmV60PefAAAANE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TTWebhosting	2025-03-21 15:39:59 (1 year ago)	(imapd) Failed IMAP login from 65.111.20.224 (US/United States/Virginia/Ashburn/-/[AS200373 3xK Tech ... show more (imapd) Failed IMAP login from 65.111.20.224 (US/United States/Virginia/Ashburn/-/[AS200373 3xK Tech GmbH]): 2 in the last 3600 secs show less	Port Scan Hacking Brute-Force
🇺🇸 vestibtech	2025-01-03 18:58:45 (1 year ago)	65.111.20.224 - - [03/Jan/2025:11:58:45 -0700] "GET /wp-login.php HTTP/1.1" 404 10743 "-" "Apache-Ht ... show more 65.111.20.224 - - [03/Jan/2025:11:58:45 -0700] "GET /wp-login.php HTTP/1.1" 404 10743 "-" "Apache-HttpClient/5.3.1 (Java/21.0.2)" ... show less	Web App Attack
🇨🇿 lp	2024-11-25 11:58:32 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.20.224 2024-11-25T12:05:29+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.20.224 2024-11-25T12:05:29+01:00 vpn Access-Reject 'hertlovr' station: 65.111.20.224 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-10-03 17:24:30 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.20.224 2024-10-03T17:33:24+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.20.224 2024-10-03T17:33:24+02:00 vpn Access-Reject 'sotv02' station: 65.111.20.224 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 anon333	2024-10-01 19:35:55 (1 year ago)	Hacker syslog review 1727811355	Hacking
Anonymous	2024-07-13 01:05:12 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-09 04:29:52 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-27 00:28:12 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.101.2.89

🇳🇱 95.85.226.199

🇮🇪 54.74.194.49

🇨🇳 39.64.109.171

🇺🇸 8.230.102.223

🇬🇧 193.163.125.106

🇮🇷 185.226.119.178

🇭🇰 121.202.198.98

🇨🇳 106.13.37.197

🇫🇷 91.121.33.230

🇺🇸 64.62.156.65

🇶🇦 34.153.65.88

🇧🇷 191.253.105.30

🇵🇪 190.223.60.209

🇮🇳 182.70.243.207

🇺🇸 162.216.149.183

🇺🇸 143.198.11.72

🇮🇳 125.23.203.114

🇸🇬 124.243.136.43

🇨🇳 111.228.57.137